{"id":4314302,"url":"https://alion.io/job/compass-staff-security-engineer-product-security-and-architecture-5","title":"Staff Security Engineer, Product Security and Architecture","company":{"id":58510,"name":"Compass","domain":"compass.com","url":"https://alion.io/company/compass","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":210000,"max":234100,"currency":"USD","period":"year","gross":null,"usd_annual":234100},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Java","optional":true},{"name":"Maven","optional":true}],"status":"live","first_seen_at":"2026-07-21T13:02:15Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-14T14:42:25Z","board_verified":true,"closed_at":null,"days_open":116,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":116},"description":"At Compass, our mission is to help everyone find their place in the world. Founded in 2012, we’re revolutionizing the real estate industry with our end-to-end platform that empowers residential real estate agents to deliver exceptional service to seller and buyer clients.\nAbout Compass International Holdings (CIH)\nCompass International Holdings (CIH) is the largest residential real estate platform in the world, established by the January 2026 merger of Compass and Anywhere Real Estate. By bringing together the technology, brands, and agent networks that power residential real estate transactions across the United States and globally. CIH's mission is to help everyone find their place in the world - and to build the single software platform for all real estate activity, at a scale and complexity few technology companies ever operate at.\nSecurity at Compass International Holdings\nThe Security organization protects one of the largest and most complex real estate technology estates in the industry. We are hands-on engineers who build security as a service: secure-by-design tooling, automated guardrails, and trusted partnership with Engineering, rather than gatekeeping. As a Staff Security Engineer, you are empowered to directly drive technical security results and shaping the roadmaps that our engineering teams adopt and build against.\nWhat You Will Do\n Automate & Scale Application Security: Build, enhance, and support automated application security testing frameworks and tooling to seamlessly integrate security into continuous integration and delivery (CI/CD) pipelines.\nDrive Secure-by-Design Architectures: Partner closely with engineering teams to evaluate solution architectures and codebases, providing technical feedback that embeds secure-by-design principles from the start.\nServe as a Trusted Security Advisor: Act as a key resource and subject matter expert for product and engineering teams, offering security guidance and risk evaluations for new product features, development processes, tooling, and services.\nEvangelize Product Security: Advocate for secure-by-design approaches across the organizations helping to mature the overall security culture.\nCultivate Collaboration: Build strong, collaborative relationships across the Product and Engineering organization to help product teams efficiently achieve their delivery goals without compromising on security.\n Secure & Accelerate with AI: Drive the adoption of AI-powered security capabilities (e.g., code/IaC scanning copilots and automated triage) to foster operational efficiencies, while establishing a AI Security Posture Management (AI-SPM) frameworks and secure-by-design standards needed to safely integrate AI into CIH products and protect enterprise data assets from emerging threats (such as prompt injection, model/data exfiltration, and unsanctioned \"shadow AI\" usage).\nContinuous Innovation: Stay ahead of industry trends, embracing and adopting new technologies to ensure security capabilities keep pace with evolving business and engineering objectives.\nWho You Are\nStrategic Collaborator: You thrive in Agile and DevOps environments, viewing security as an enabler of engineering velocity rather than a bottleneck.\nTechnical Leader & Advocate: You are passionate about mentoring others and can articulately champion security concepts to both deeply technical engineers and business stakeholders.\nAnalytical Problem Solver: You possess exceptional troubleshooting skills and the logical capacity to diagnose complex architectural and pipeline security challenges.\nSelf-Driven Achiever: You are highly self-motivated, with the organizational and time-management skills required to manage multiple complex initiatives simultaneously.\nMinimum Qualifications\nBachelor’s degree in Computer Science, a related technical field, or equivalent practical work experience.\nMinimum of three (3) years of experience across the following areas:\nAdministering and configuring automated pipeline tools (CI/CD).\nAdministering and tuning application security testing tools (e.g., SAST, DAST, or SCA).\nAutomation scripting using Python or Bash.\nProduct development using Python, JavaScript, TypeScript, Golang, or Java.\nPerforming security code reviews for solutions built in Python, JavaScript, TypeScript, Golang, or Java.\nParticipating in security-focused reviews for both vendor and custom business solutions.\nHands-on experience with Infrastructure as Code (IaC) tools (e.g., Terraform) to provision secure, reproducible infrastructure.\nPractical experience working with AWS services, aligning both product solution delivery and security objectives.\nHands-on experience using Artificial Intelligence (AI) to assist with product security processes to drive team and operational efficiencies.\nNice to Have \nRelevant industry certifications (e.g., CEH, CISSP, CSSLP, GIAC, or cloud security certifications) are a strong plus.\nDirect experience working within high-performing DevOps and Agile cultures.\nExperience with Layer 7 security controls (e.g., Web Application Firewalls (WAF), API Gateways, OAuth2/OIDC implementation, and rate limiting).\nExperience driving secure-by-design practices across multi-cloud strategies (e.g., AWS, Azure, GCP).\nExperience reviewing and assessing the use of AI technologies within both vendor-provided and custom-developed business solutions.\nExperience operating in a publicly traded company, including familiarity with SOX-adjacent control environments and audit processes.\nExperience securing environments through a merger, acquisition, or major infrastructure consolidation.\nCompensation: The base pay range for this position is $210,000 - $234,100; however, base pay offered may vary depending on job-related knowledge, skills, and experience. Bonuses and restricted stock units may be provided as part of the compensation package, in addition to a full range of benefits. Base pay is based on market location. Minimum wage for the position will always be met\nPerks that You Need to Know About:\nParticipation in our incentive programs (which may include eligible cash, equity, or commissions). Plus paid vacation, holidays, sick time, parental leave, and recharge leave; medical, tele-health, dental and vision benefits; 401(k) plan; flexible spending accounts (FSAs); commuter program; life and disability insurance; Maven (a support system for new parents); Carrot (fertility benefits); UrbanSitter (caregiver referral network); Employee Assistance Program; and pet insurance.\nDo your best work, be your authentic self.\nAt Compass, we believe that everyone deserves to find their place in the world - a place where they feel like they belong, where they can be their authentic selves, where they can thrive. Our collaborative, energetic culture is grounded in ourCompass Entrepreneurship Principles and our commitment to diversity, equity, inclusion, growth and mobility. As an equal opportunity employer, we offer competitive compensation packages, robust benefits and professional growth opportunities aimed at helping to improve our employees' lives and careers.\nNotice for California Applicants\nLos Angeles County Fair Chance Notice","description_format":"text","description_chars":7169,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Growth opportunities","Parental leave","Restricted stock units"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Residential Real Estate","PropTech","Real Estate Brokerage"],"lifecycle":[{"event":"open","at":"2026-11-14T14:42:25Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 7 · green card filings: 1","filings_12m":7,"filings_prev_12m":6,"green_card_filings_12m":1,"median_offered_wage_usd":103125,"route":null,"cap_exempt":false,"checked_at":"2026-11-14T07:33:33+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.395,"p_room":0.28,"age_days":116,"expected_fill_days":32,"reasons":["conf:3","win:tail","crowd:brand"],"computed_at":"2026-11-14T18:13:50Z"},"pay":{"stated_usd_annual":234100,"is_top_pay":true},"html_url":"https://alion.io/job/compass-staff-security-engineer-product-security-and-architecture-5","json_url":"https://alion.io/job/compass-staff-security-engineer-product-security-and-architecture-5.json","meta":{"generated_at":"2026-11-14T18:13:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21530,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58510},"rest":"https://alion.io/mcp/rest/get_company?id=58510"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture-5"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture-5"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture-5"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/compass-staff-security-engineer-product-security-and-architecture-5\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcompass-staff-security-engineer-product-security-and-architecture-5"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4314302}},{"tool":"search_jobs","arguments":{"company":"compass.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4314302},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}